I've been wondering how to create a registration dialog...

I can create the user interface; Three textboxes - name, company, serial... But it is the checking it against a list of already registered people that has me baffled...

Also I need somewhere to store the list in a format that can't be hacked... easily...

Any help would be appreciated, thanks

- Jason

You can store the data in Sql server. To protect the data there are many ways. But you need just to access the data on the right way (protecting from sql injections). That means to use store procedures or parametrized commands. When you insert users, first questions is what field to be key for the user. One of mostly used is email adress which can be his username in your application. Storing password is a different story. You need to protect the password against any one even you. If by some fault security, some one reads the data, you should protect from getting users passwords in the application. Common solution is to encrypt the password with one way encrypting method which means that you can't decrypt encrypted password. Now there is also new encrypting model to raise encryption security, and that is to use Password Salt and Password Hash.

I would like to avoid SQL Server, If possible... Thanks anyway...

Hi

a simple approach would be

- on the client machine write some value to the registry

- on a server machine implement a webservice which receives the client information and validates it

The validation could happen on a serial number of some kind.. ie: each client has a unique number, check if the number has been used

Hope this helps you out, please close the thread if it does